Hello, I have an issue regarding the JWT tokens I’m getting from Auth0 and how I’m trying to decode them on my Python backend using PyJWT. I have set my Auth0 application to use the HS256 signing algorithm. However, the JWTs I’m getting seem to be using the “dir” algorithm and “A256GCM” encryption,…

Thanks for getting back to me, happy to help! Interesting - I’m not able to reproduce using the Management API identifier(https://your_domain.us.auth0.com/api/v2) as the audience - The Management API is by default set to use RS256 so the token returned should be RS256 regardless of application sett…

JWT "alg" field mismatch issue with Auth0 and Python backend

Help

tyf May 17, 2023, 10:07pm 3

Hey there @dengziyang77 welcome to the community!

I believe this is the result of requesting an HS256 token without an audience. Are you passing an audience param to loginWithRedirect() or any other form of invoking an authorization call?

Let us know!

Topic		Replies	Views
Can't Validate Token w/JWT Help sessions , authentication-sessions	4	1950	June 11, 2023
How to Handle JWTs in Python Blog Discussions	5	3834	February 26, 2024
Signature verification failed in jwt.decode() Help test , other	1	688	March 24, 2024
Unable to find a algorithm for key Help jwt	6	4264	July 7, 2023
Auth0 API authorization with Google App Engine Help authorization , api-authorization , google-app , auth0-api	4	5626	March 2, 2018

JWT "alg" field mismatch issue with Auth0 and Python backend

Related Topics